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Top Stories 

• A former employee of a FedEx facility in Kennesaw, Georgia, entered the facility with a 
firearm April 29, shot and injured six people before shooting himself at the facility’s 
loading dock. - WXIA 11 Atlanta (See item 12 ) 

• Crews continued working to extinguish a fire in a 700-foot-long railroad tunnel in Pike 
County, Kentucky, that began pouring out heavy smoke and fumes April 26 due to the 
tunnel’s timbers being treated with creosote. - WYMT 57 Hazard (See item 13 ) 

• Adobe released updates for it Flash Player for Windows, Mac, and Linux following the 
discovery of a new zero-day vulnerability that is being actively exploited in the wild, and 
advised users to update immediately. - Help Net Security (See item 35 ) 

• Six people were injured and 1 person was killed when a driver lost control of his vehicle, 
struck a fence, and drove into a line of people waiting to enter Farrell’s Ice Cream Parlour 
in Buena Park, California, April 25. - Associated Press (See item 40 ) 
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Energy Sector 



1. April 29, Associated Press - (Alabama) More than 24K without power in Ala after 
storms. Alabama Power Co., and Huntsville Utilities’ crews worked to restore power 
to about 24,300 homes and businesses around Alabama after a band of severe storms 
moved through the State April 28. 

Source: http://foxl0tv.com/2014/04/28/storms-leave-thousands-without-power-in-ala/ 
For additional stories, see items 11 and 31 
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Chemical Industry Sector 

2. April 26, Hawaii24/7.com - (Hawaii) Sulfuric acid spill temporarily closes street in 
Hilo Friday morning (April 25). Crews responded when about 250 gallons of sulfuric 
acid spilled from a container as it was being loaded onto a truck at BEI Hawaii in Hilo 
April 25. Workers used soda ash to neutralize the acid, some of which leaked into a 
roadway drywell, while authorities tested pH levels and cleaned the area. 

Source: http://www.hawaii247.com/2014/04/26/sulfuric-acid-spill-temporarily-closes- 
street-in-hilo-fridav-morning-april-25/ 

3. April 25, Reno Gazette- Journal - (Nevada) 1 dead in Sparks Sierra Chemical air 
canister explosion. A Sierra Chemical Company employee was killed when a 550- 
gallon plastic compressed air canister exploded at the Sparks, Nevada facility while the 
worker was performing a test operation April 25. No other chemicals or fire were 
involved in the explosion and operations were suspended indefinitely while authorities 
investigated the incident. 

Source: http://www.rgi.com/story/news/2014/04/25/l-dead-in-sierra-chemical-air- 
canister-explosion-in-sparks/8 177407/ 

For another story, see item 31 
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Nuclear Reactors, Materials, and Waste Sector 

4. April 28, Columbia The State - (South Carolina) Cracks found at VC Summer 
nuclear plant; reactor head to be replaced in 2017. South Carolina Electric & Gas 
(SCE&G) officials stated April 28 that a reactor vessel head at the V.C. Summer 
nuclear power plant in Jenkinsville will be replaced in 2017 after small cracks were 
found in the current reactor vessel head during a planned maintenance outage. 
Source: http://www.thestate.com/2014/04/28/3414974/cracks-found-at-vc-summer- 
nuclear.html 



For another story, see item 31 
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Critical Manufacturing Sector 

5. April 29, Associated Press - (National) BMW recalls 156,000 cars, SUVs due to 
stalling engines, increased crash risk. BMW announced a recall of over 156,000 
model year 2010-2012 1-Series, 3-Series, 5-Series, 6-Series, X-Series, and Z4 vehicles 
due to the potential for bolts holding a camshaft housing to loosen and break, leading to 
reduced power or stalling. 

Source: http://www.wxvz.com/money/business-news/recall-bmw-recalls-156000-cars- 
suvs-due-to-stalling-engines-increased-crash-risk 

6. April 29, Cars.com - (National) Recall alert: 2008-2011 Mercedes-Benz C-Class. 
Mercedes-Benz announced a recall of around 252,867 model year 2008-201 1 C-Class 
vehicles due to a poor electrical ground connection that can cause the dimming or 
failure of the vehicles’ taillights. 

Source: http://blogs.cars.com/kickingtires/2014/04/recall-alert-20Q8-2011-mercedes- 
benz-c-class.html 

7. April 29, U.S. Consumer Product Safety Commission - (National) GE Brand 
Dehumidifiers by Midea recalled for repair due to lire hazard; sold exclusively at 
Walmart. Midea announced a recall of around 15,500 GE Brand Dehumidifiers due to 
the potential for a component in the dehumidifiers’ compressors to short circuit, posing 
a fire hazard. The dehumidifiers were sold exclusively at Walmart stores between 
March 2010 and December 2010. 

Source: http://www.cpsc.gov/en/Recalls/2014/GE-Brand-Dehumidifiers-by-Midea- 
Recalled-for-Repair/ 

8. April 29, U.S. Consumer Product Safety Commission - (National) DGL Group recalls 
Vibe USB Mobile Power Bars due to fire hazard; sold exclusively at Five Below. 
DGL Group announced a recall of around 99,000 Vibe USB Mobile Power Bars that 
were sold exclusively at Five Below stores due to the potential for the devices to 
overheat, posing a fire hazard. 

Source: http://www.cpsc.gov/en/Recalls/2014/DGL-Group-Recalls-Yibe-USB-Mobile- 
Power-Bars/ 

9. April 28, Cleveland Plain Dealer - (Ohio; New York) Republic Steel fined $2.4 
million for OSHA health and safety violations at Lorain plant and 3 other 
facilities. Republic Steel agreed to pay a $2.4 million fine as part of a settlement with 
the Occupational Safety and Health Administration to resolve over 100 alleged health 
and safety violations at three facilities in Ohio and one in New York. 

Source: 

http://www.cleveland.com/business/index.ssf/2014/04/republic steel fined 24 millio. 
html 
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For another story, see item 31 
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Defense Industrial Base Sector 

See items 31 and 36 
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Financial Services Sector 

10. April 28, Woodland Daily Democrat - (California) Former Woodland loan officer 
involved in mortgage fraud scheme. A former Delta Homes and Lending loan officer 
and branch manager from Woodland was charged along with four others for allegedly 
participating in a mortgage fraud scheme that involved over $10 million in properties 
and defrauded lenders of at least $4 million. A Sacramento real estate agent pleaded 
guilty April 28 to running the scheme. 

Source: http://www.dailydemocrat.com/breakingnews/ci 25655706/former-woodland- 
loan-officer-involved-mortgage-fraud-scheme 

For additional stories, see items 33 and 36 
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Transportation Systems Sector 

11. April 29, Associated Press - (South Dakota) NTSB to focus on why SD plane was 
flying so low. The Federal Aviation Administration is investigating after a small 
aircraft struck a wind turbine blade and crashed April 27 at a wind farm near Highmore 
in foggy weather, killing the pilot and three other passengers. 

Source: http://abcnews.go.com/US/wireStory/dead-plane-crashes-south-dakota- wind- 
farm-235054 13 

12. April 29, WXIA 11 Atlanta - (Georgia) 3 critical after Kennesaw FedEx shooting; 
“Rambo” suspect dead. A former employee of a FedEx facility in Kennesaw entered 
the facility with a firearm April 29 and injured six people before shooting himself at the 
FedEx facility’s loading dock. Three victims were reported in critical condition and 
police had not confirmed a motive. 

Source: http://www.llalive.com/story/news/local/kennesaw/2014/04/29/kennesaw- 
fedex-shooting/8448813/ 

13. April 29, WYMT 57 Hazard - (Kentucky) Fire inside railroad tunnel causing 
concern in Pike County. Crews continued working to extinguish a fire in a 700-foot- 
long railroad tunnel in Pike County, Kentucky, that began pouring out heavy smoke 
and fumes April 26 due to the tu nn el’s timbers being treated with creosote. Some 
schools were closed in the area April 28-29 due to the smoke. 

Source: http://www.wkyt.com/wvmt/home/headlines/Railroad-tunnel-fire-causing- 
concem-in-Pike-County-25708657 1 .html 
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14. April 29, WDEL 1150 AM Dover - (National) Delays traveling by train between 
Wilm. And DC. Northeast Regional and Acela Express rail passengers traveling the 
eastern corridor between Philadelphia and Washington, D.C. April 29 experienced 
major delays due to downed power lines in Perryville, Maryland. 

Source: http://www.wdel.com/storv.php?id=58911 

15. April 29, Associated Press - (Illinois) Winds cause Illinois freight train derailment. 
Strong winds caused around two dozen freight train cars to derail near Laura, Illinois, 
April 28. No injuries were reported. 

Source: http://www.bnd.com/2014/Q4/29/3183742/winds-cause-illinois-freight- 
train.html 

16. April 28, WDRB 41 Louisville - (Indiana) 1-64 W ramp to 1-265 E back open after 
truck spills human waste. Indiana State Police were forced to close the Interstate 265 
eastbound ramp from 1-64 westbound in Floyd County for several hours after a dump 
truck carrying treated human waste spilled its contents on the road. 

Source: http://www.wdrb.com/storv/25369023/i-64-w-ramp-to-i-265-e-closed-after- 
truck-spills-human-waste 
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Food and Agriculture Sector 

17. April 28, Indianapolis Star - (Indiana) Teavana patrons at The Fashion Mall at 
Keystone at risk of Hepatitis A. The Marion County Public Health Department issued 
an alert April 28 warning that patrons who visited the Teavana store at the Fashion 
Mall at Keystone shopping center April 5,12, and 19 may have been exposed to 
hepatitis A. Officials advised individuals who visited the store and drank tea April 19 to 
receive a vaccination or immune globulin to prevent the disease, while patrons who 
visited April 5 and 12 are beyond the incubation period of the virus and should monitor 
for symptoms. 

Source: http://www.indvstar.com/storv/news/2014/04/28/teavana-patrons-kevstone- 
crossing-risk-hepatitis/8440347/ 

18. April 28, WPX1 11 Pittsburgh - (Pennsylvania) DEP issues recall for locally bottled 
water with E. coli bacteria. The Pennsylvania Department of Environmental 
Protection issued a recall during the weekend of April 26 for 9,400 units of 3-, 4-, and 
5-gallon bottles of Tyler Mountain Water, which is bottled and delivered by 
Pennsylvania-based Aqua Filter Fresh. The recall was initiated after tests by the 
Allegheny County Health Department revealed total coliform and E. coli bacteria in 
samples. 

Source: http://www.wpxi.com/news/news/local/dep-issues-recall-locaHv-bottled-water- 
e-coli-bac/nfjBN/ 

19. April 27, Associated Press - (New York) Teen's arm severed in NY eatery's pasta 
machine. An employee of Violi’s Restaurant in Massena was cleaning the store’s pasta 
machine when his right arm got caught and severed at the elbow April 24. Authorities 
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are investigating what triggered the machine to activate while the employee was 
cleaning it. 

Source: http://news.msn.com/us/teens-arm-severed-in-nv-eaterys-pasta-machine 

20. April 27, Associated Press - (Iowa) 40K lbs of frozen turkey spilled on Iowa 

highway. The driver of a semi-truck carrying 40,000 pounds of frozen turkey swerved 
to avoid a deer, struck a guardrail, and overturned onto U.S. 61 near Dubuque, Iowa, 
April 25. The turkey was determined to be unfit for consumption and was transported 
to a local landfill. 

Source: http://www.wxow.com/story/25351277/40k-lbs-of-frozen-turkev-spilled-on- 
iowa-highway 
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Water and Wastewater Systems Sector 

21 .April 29, Associated Press - (Kentucky) Wastewater release in Bullitt County 
prompts warnings against contact with streams. A system failure at the Hunters 
Hollow Wastewater Treatment Plant in Bullitt County caused untreated wastewater 
high in E. coli to be leaked into a tributary of Brooks Run and the mainstem of Brooks 
Run below the tributary. Officials posted signs advising people to avoid recreational 
use of the water. 

Source: 

http://www.therepublic.com/view/story/b75f8bff3ac043dabee64ff4cl48facb/KY— 
Waste water- Release 



22. April 28, Laguna Beach Coastline Pilot - (California) Sewage spill closes portion of 
coastline. A blocked sewage line April 28 caused a sewage leak out of a manhole at a 
Laguna Hills intersection, allowing about 10,000 gallons to flow into storm drains and 
prompting the Orange County Health Care Agency to close a half-mile stretch of 
coastline near Aliso Beach Park. 

Source: http://www.coastlinepilot.com/news/tn-cpt-me-0502-sewage-spill- 
20140428,0,657 1940.story 

For another story, see item 31 
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Healthcare and Public Health Sector 

23. April 28, KTBC 7 Austin - (Texas) Computer containing patient data stolen from 
Seton. Seton Northwest Hospital in Texas notified approximately 180 patients that a 
password-protected Hewlett Packard desktop device, which holds their personal 
information, was stolen from a locked storage area of the hospital’s sleep lab in 
February. The hospital is investigating the incident. 

Source: http://www.mvfoxaustin.com/storv/25372824/cornputer-containing-patient- 
data-stolen-from-seton 
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For another story, see item 9 
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Government Facilities Sector 

24. April 29, Albuquerque Journal - (New Mexico; Texas; Colorado) 2 charged with 
unemployment benefits scam. Two individuals were charged by federal officials for 
using fake companies and real people’s names to obtain $801,848 in fraudulent 
unemployment payments from the New Mexico Department of Workforce Solutions, 
the Colorado Department of Labor and Employment, and the Texas Workforce 
Commission between 2009 and 2012. Authorities arrested one man while the other is 
still on the loose and considered a fugitive. 

Source: http://www.abqiournal.com/391304/news/2-charged-with-unemplovment- 
benefits-scam.html 



25. April 29, Quad-City Times - (Iowa) 15 sent to hospital after school bus-car crash in 
Bettendorf. Thirteen Bettendorf Middle School students and two adults were 
transported to area hospitals April 28 after an accident involving a school bus and 
vehicle in Iowa. 

Source: http://qctimes.com/traffic/sent-to-hospital-after-school-bus-car-crash-in- 
bettendoif/art'.rle e96ec60a-df43-5 1 67-b579-7fd2563646d0.html 

26. April 29, WTVF 5 Nashville - (Tennessee) School systems announce Tuesday 
closings following storms. Several school districts in Tennessee were closed April 29 
due to severe weather which caused damage and flooding in the area. 

Source: http://www.newschannel5.com/story/25373429/school-svstems-announce- 
tuesday-closings-due-to-storm-damage 

27. April 28, Richmond Times-Dispatch - (Virginia) Sprinkler incident sickens 7 
Meadowbrook students. Four Meadowbrook High School students were treated at the 
scene while three others were transported to area hospitals after becoming nauseous 
due to the odor of stale water, which came out of a sprinkler system that inadvertently 
activated and flooded two classrooms April 28. Chesterfield County firefighters shut 
off the system and students were evacuated while crews cleaned and inspected the 
damage. 

Source: http://www.timesdispatch.com/news/latest-news/sprinkler-incident-sickens- 
meadowbrook-students/article fl4d7e46-cf0b-lle3-babf-0017a43b2370.html 



For additional stories, see items 13, 22, and 28 
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Emergency Services Sector 

28. April 29, NBC News - (Alabama) Tornado hits fire station, school in Kimberly, 
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Alabama. The fire station in Kimberly, Alabama, was destroyed and North Jefferson 
Middle School suffered extensive damage due to a tornado April 28. 

Source: http://www.nbcnews.com/storvline/deadly-tomado-outbreak/tornado-hits-fire- 
station-school-kimberly-alabama-n92106 



29. April 28, Fayetteville Observer - (North Carolina; South Carolina) Fair Bluff police 
cruiser stolen, found burned in South Carolina. A Fair Bluff Police Department 
cruiser was found destroyed by fire in South Carolina April 28 after the marked patrol 
car was stolen from outside the Fair Bluff police station in North Carolina. Authorities 
are investigating the incident in order to determine who took the vehicle. 

Source: http://www.favobserver.com/news/local/article e9f4ffc5-a04f-5052-abc9- 
8bable807464.html 
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Information Technology Sector 

30. April 29, Help Net Security - (International) AOL breach confirmed, bigger than 
initially thought. AOL confirmed April 28 that attackers breached the company’s 
systems and networks, leading to a significant increase in spoofed email spam from 
AOL Mail accounts. Around 500,000 users had their email addresses, postal addresses, 
address book contacts, encrypted passwords, and encrypted security questions 
compromised in the breach. 

Source: http://www.net-security.org/secworld.php?id= 16758 

31 .April 29, Softpedia - (International) Siemens patches Heartbleed bug in industrial 
products. Siemens published an advisory and updates for several of its industrial 
control systems (ICS) programs that address the Heartbleed vulnerability in OpenSSL. 
Some Siemens ICS software remain unpatched, and the company advised users to apply 
workarounds until a full patch is made available. 

Source: http://news.softpedia.com/news/Siemens-Patches-Heartbleed-Bug-in- 
Industrial-Products-439837.shtml 

32. April 29, Softpedia - (International) Apple fixes vulnerability that granted anyone 
access to personal details of developers. Apple closed a vulnerability in its Developer 
Center’s Radar application that could have been exploited to obtain the contact 
information of Apple retail and corporate employees and iOS, Mac, and Safari 
developers. A proof-of-concept was revealed by the researcher who discovered the 
vulnerability after Apple closed the vulnerability. 

Source: http://news.softpedia.com/news/Apple-Fixes-Vulnerabilitv-That-Granted- 
Anyone-Access-to-Personal-Details-of-Developers-439812.shtml 

33. April 29, Softpedia - (International) Phishers abuse Microsoft Azure to target 
PayPal, Apple, and Visa customers. Researchers at Netcraft reported that 
cybercriminals are making use of 30-day trials of Microsoft’s Azure cloud service to 
host phishing Web sites. The researchers identified several Azure-hosted phishing 
pages targeting Apple, Comcast, PayPal, Visa, American Express, and Cielo customers. 
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Source: http://news.softpedia.com/news/Phishers-Abuse-Microsoft-Azure-to-Target- 
PayPal-Apple-and-Visa-Customers-439800.shtml 

34. April 29, The Register - (International) Researchers warn of resurgent Sefnit 
malware. Researchers at Facebook reported that the Sefnit malware has been seen in 
use again, but without the use of a Tor client. The malware instead establishes direct 
connections to one or more command and control servers using a secure Plink 
connection. 

Source: 

http://www.theregister.co.uk/2014/04/29/researchers warn of resurgent sefnit malwa 
re/ 

35. April 28, Help Net Security - (International) Flash O-day exploited in watering hole 
attacks, Adobe provides patch. Adobe released updates for it Flash Player for 
Windows, Mac, and L inux following the discovery of a new zero-day vulnerability that 
is being actively exploited in the wild. Users were advised to update immediately. 
Source: http://www.net-securitv.org/secworld.php?id=16750 

36. April 28, CNET News - (International) Stop using Microsoft’s IE browser until bug 
is fixed, US and UK warn. The U.S. Computer Emergency Readiness Team (US- 
CERT) advised users to stop using the Internet Explorer browser until Microsoft can 
develop a patch for a recently-disclosed vulnerability that can allow attackers to run 
malicious code. The vulnerability is currently being used in attacks against U.S. defense 
and financial organizations, according to FireEye researchers. 

Source: http://www.cnet.com/news/stop-using-ie-until-bug-is-fixed-savs-us/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

37. April 29, Peninsula Daily News - (Washington) KONP-AM signal expected back 
today after repairs. KONP’s 1450 AM signal was disrupted April 25 after the 
transmitter’s primary and backup power modules failed, effectively causing the radio 
station to rely solely on its FM frequency until replacement parts for the transmitter 
arrived April 29. 

Source: http://www.peninsuladailynews.com/article/20140429/news/304299979/konp- 
am-signal-expected-back-today-after-repairs 

For another story, see item 33 
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Commercial Facilities Sector 

38. April 29, Winston-Salem Journal - (North Carolina) Two people shot, several injured 
after series of fights at apartment building. Two people were shot and three others 
were injured following a domestic dispute at the Salem Garden Apartments complex in 
Winston-Salem April 28. After the initial altercation ended, an unknown shooter shot 
towards the building and struck the two bystanders unrelated to the original incident. 
Source: http://www.iournalnow.com/news/crime/two-people-shot-several-iniured-after- 
series-of-fights-at/article 6df3fc08-cf99-lle3-9824-0017a43b2370.html 

39. April 28, U.S. Department of Justice - (Texas) Houston man pleads guilty to 
threatening to bomb synagogue. A Texas man pleaded guilty April 28 to threatening 
to bomb the Congregation Beth Israel synagogue in Houston in April 2013, resulting in 
the synagogue closing for one day and hiring extra security to guard the building and 
school. 

Source: http://www.iustice.gov/opa/pr/2014/April/14-crt-448.html 

40. April 27, Associated Press - (California) SUV rams people at ice cream shop; 1 
dead, 6 hurt. Six people were injured and 1 person was killed when a driver lost 
control of his vehicle, struck a fence, and drove into a line of people waiting to enter 
Farrell’s Ice Cream Parlour in Buena Park April 25. 

Source: http://news.msn.com/us/suv-rams-people-at-ice-cream-shop-l-dead-6-hurt 
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Dams Sector 

See item 31 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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